design

sonarqube-cli: Fast Terminal Insights for Code Quality & Secrets

Name: sonarqube-cli: Fast Terminal Insights for Code Quality & Secrets
Author: SonarSource

Run SonarQube scans directly from your CLI, spot secrets, and receive instant security and quality feedback—ideal for founders who need rapid, code‑level assurance.

From the repo · “Command-line interface for SonarQube with AI agent integration. Scan for secrets and get fast feedback on code quality and security from your terminal.”

291 stars+2★ this week19 forksTypeScriptGuide quality 9/10 · reviewed Oct 19Updated 10/22/2026100% free · open source

What it does

Sonarqube-cli provides instant code quality and security insights through a command-line interface, integrating with SonarQube and an AI agent to scan for secrets and offer feedback

When to use it

•When you need to identify code quality issues before deploying to production
•When searching for security vulnerabilities in your codebase
•When you want to integrate code analysis into your CI/CD pipeline

Ready-to-paste prompt

sonarqube analyze -Dsonar.login=mylogin -Dsonar.password=mypassword -Dsonar.host.url=http://localhost:9000

Heads up: You need a SonarQube instance set up and accessible, with a valid login and password, to use sonarqube-cli

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/sonarqube-cli && curl -fsSL https://workflowstacks.com/api/skills/sonarqube-cli/claude-skill -o ~/.claude/skills/sonarqube-cli/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

How sonarqube-cli: Fast Terminal Insights for Code Quality & Secrets works

Codeflow

Free to inspect

Sonarqube-cli: Fast Terminal Insights for Code Quality & Secrets is a very large TypeScript project (~62k lines across 477 code files, plus 406 test files). Setup is light: installs like a normal app. Reading the code is optional. Last commit this month, LGPL-3.0 license, has a test suite.

Size

Very large codebase

~62k lines · 477 code files · days to read — use, don't read

Setup

One-command install

Installs like a normal app. Reading the code is optional.

Runs on

Node.js

No API keys detected

TypeScript 99%Shell 1%

Where to start reading

1
README.md
Start here — what it does and how to install it
2
AGENTS.md
The instructions the AI actually follows
3
src/index.ts
Where the program starts running
4
package.json
Dependencies and the commands it exposes

What's in each folder

src/Core code — the actual logic451 files

docs/Documentation16 files

build-scripts/Folder17 files

mdm-scripts/Folder12 files

user-scripts/Folder4 files

tests/Tests — proof it works416 files

.github/CI / automation (GitHub Actions)22 files

.claude/Editor / agent settings3 files

READMEHas testsDocumentedCI checksLGPL-3.0 licenseUpdated this month

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/sonarqube-cli && curl -fsSL https://workflowstacks.com/api/skills/sonarqube-cli/claude-skill -o ~/.claude/skills/sonarqube-cli/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

SonarSource

Language

TypeScript